Description
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | kernel 5.17 rc5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.16.14-1 | — |
| Debian 13 | linux | 5.16.14-1 | — |
| Debian 12 | linux | 5.16.14-1 | — |
| Debian 11 | linux | 5.10.120-1 | DSA-5161-1 |
| Debian 10 | linux | 4.19.249-2 | DSA-5173-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 9 | linux | 4.9.320-2 | DLA-3065-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-124.140 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1083.90 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1089.94 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-azure-fde | 5.4.0-1089.94+cvm1.2 | USN-5582-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1044.49 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1086.94 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-gke | 5.4.0-1080.86 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1051.54 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1031.35 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1008.11~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1004.6 | — |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1073.78 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1033.36 | USN-5381-1 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1081.89 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1068.78 | USN-5562-1 |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-191.202 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1139.150 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-aws-5.4 | 5.4.0-1083.90~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1149.164 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-azure-5.4 | 5.4.0-1089.94~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1051.56 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-gcp +12 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1134.150 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-gcp-5.4 | 5.4.0-1086.94~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-gke-5.4 | 5.4.0-1080.86~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | 5.4.0-1051.54~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-124.140~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-ibm-5.4 | 5.4.0-1031.35~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1125.130 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1104.115 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-oracle-5.4 | 5.4.0-1081.89~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-raspi-5.4 | 5.4.0-1068.78~18.04.1 | USN-5562-1 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1117.125 | USN-5560-1 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1135.145 | USN-5560-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1083.90+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1089.94+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1059.67 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1086.94+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2078.83 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2059.65 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1096.107 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2043.48 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1088.95 | — |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-239.273 | USN-6014-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1155.170 | USN-6001-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1139.150~16.04.1 | USN-5560-2 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1149.164~16.04.1 | USN-5560-2 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1134.150~16.04.2 | USN-5560-2 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-191.202~16.04.1 | USN-5560-2 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1118.128 | USN-6014-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1104.115~16.04.1 | USN-5560-2 |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1117.123 | USN-6013-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1149.164~14.04.1 | USN-5560-2 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-239.273~14.04.1 | USN-6014-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | kernel-rt +12 | 5.14.0-70.22.1.rt21.94.el9_0 | RHSA-2022:6002 |
| RHEL 9 | perf +29 | 5.14.0-70.22.1.el9_0 | RHSA-2022:6003 |
| RHEL 8 | kernel-rt +12 | 4.18.0-372.32.1.rt7.189.el8_6 | RHSA-2022:7134 |
| RHEL 8 | perf +26 | 4.18.0-372.32.1.el8_6 | RHSA-2022:7110 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | perf +2 | 4.18.0-372.32.1.el8_6 | RHSA-2022:7110 |
| RHEL 8.4 EUS | kernel-rt +12 | 4.18.0-305.62.1.rt7.134.el8_4 | RHSA-2022:6248 |
| RHEL 8.4 EUS | perf +26 | 4.18.0-305.62.1.el8_4 | RHSA-2022:6243 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | kernel-rt +11 | 5.14.0-70.22.1.rt21.94.el9_0 | ALSA-2022:6002 |
| AlmaLinux 9 | perf +27 | 5.14.0-70.22.1.el9_0 | ALSA-2022:6003 |
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-372.32.1.rt7.189.el8_6 | ALSA-2022:7134 |
| AlmaLinux 8 | perf +19 | 4.18.0-372.32.1.el8_6 | ALSA-2022:7110 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kernel | 4.18.0-372.32.1.el8_6 | RLSA-2022:7110 |
| Rocky Linux 8 | kernel-rt | 4.18.0-372.32.1.rt7.189.el8_6 | RLSA-2022:7134 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| SLES 15 SP4 | kernel-azure +2 | 5.14.21-150400.14.7.1 | SUSE-SU-2022:2615-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.11.1.150400.24.3.6 | SUSE-SU-2022:2520-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_1 | 1-150400.9.5.3 | SUSE-SU-2022:2520-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | dtb-aarch64 +10 | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| openSUSE Leap 15.4 | kernel-azure +2 | 5.14.21-150400.14.7.1 | SUSE-SU-2022:2615-1 |
| openSUSE Leap 15.4 | kernel-default-base | 5.14.21-150400.24.11.1.150400.24.3.6 | SUSE-SU-2022:2520-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.10-15.42 | 1.0-0.amzn2023 | ALAS2023-2023-070 |
| Amazon Linux 2023 | perf +12 | 6.1.10-15.42.amzn2023 | ALAS2023-2023-070 |
| Amazon Linux 2 | kernel-livepatch-4.14.285-215.501 | 1.0-0.amzn2 | ALAS2-2022-1813 |
| Amazon Linux 2 | perf +8 | 4.14.285-215.501.amzn2 | ALAS2-2022-1813 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.37.1-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | perf +21 | 5.14.0-70.22.1.0.1.el9_0 | ELSA-2022-6003 |
| Oracle Linux 8 | perf +19 | 4.18.0-372.32.1.0.1.el8_6 | ELSA-2022-7110 |
Advisories 31
- ALSA-2022:6003 Moderate: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:6002 Moderate: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:7134 Important: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:7110 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- USN-6014-1 linux, linux-kvm, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6013-1 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6001-1 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-5560-1 linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- USN-5560-2 linux-hwe, linux-aws-hwe, linux-azure, linux-gcp, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- USN-5381-1 linux-oem-5.14 vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- USN-5562-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Sep 10, 2026
- RHSA-2022:7134 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 11, 2026
- RHSA-2022:7110 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 11, 2026
- RHSA-2022:6248 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 11, 2026
- RHSA-2022:6243 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 11, 2026
- RHSA-2022:6003 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:6002 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jul 30, 2026
- USN-5582-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- DSA-5173-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5161-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3065-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2022:7110 Important: kernel security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2022:7134 Important: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2022:2520-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2615-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2022-1813 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 2, 2025
- ALAS2023-2023-070 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 10, 2024
- ICSA-23-075-01 Siemens SCALANCE, RUGGEDCOM Third-Party CISA ICS & IT advisories · Mar 14, 2023
- SSA-419740 SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 Siemens ProductCERT · Mar 14, 2023
- ELSA-2022-7110 Important: kernel security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 26, 2022
- ELSA-2022-6003 Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 10, 2022